working on hack/malware issues right now

was dealing with a death in the family before that and wasn’t entirely made aware of what was happening here so i apologize for not being able to resolve things earlier.

i’ll post updates here as i fix things.

it looks like code was injected into one of the plugins, it’s been removed, but i’m looking for other places code may have been modified.

———- Post added at 01:51 PM ———- Previous post was at 01:18 PM ———-

believe i found & removed the code that was both causing the redirects and displaying malware/spammy ads

let me know if you continue to have problems with either

the only thing that should be detected on the main page is google analytics; it’s meant to be there and isn’t malicious. if you see anything else appearing, let me know.

let me know what style you’re using and what page (url) you’re on when you have problems, it will make it easier to figure out the source of the issue

Seems to be fixed now, and is loading faster, especially in private messages. Thanks for the help. Mobile is not experiencing trouble either.

Old-school style and redirects are still happening!

could you upload a saved version of the page it’s appearing on? need to look at the html to help figure out where it’s coming from

Ah wait, it’s back

———- Post added at 02:21 PM ———- Previous post was at 02:20 PM ———-

Here’s the main page html

https://hastebin.com/omapekohon.xml

———- Post added at 02:22 PM ———- Previous post was at 02:21 PM ———-

The redirect seems to happen after the page has finished loading, if that helps any

———- Post added at 02:22 PM ———- Previous post was at 02:22 PM ———-

Line 2792

******** src="http://horoskopishqip.org/blog/haxored.php" width="728" height="90" frameBorder="0" scrolling="no" seamless="seamless"></iframe>

Sarah it’s literally any page on the forums for me. Both on phone and laptop. Confirmed on LTE too

———- Post added at 01:23 PM ———- Previous post was at 01:22 PM ———-

Page redirects to http://horoskopishqip.org/blog/haxored.php

Yeah, there’s an iframe of that on the main page near the bottom

found & removed that iframe, anything still showing up for you?

Nothing at the moment. Sometimes, logging in would show an invalid redirect URL, but would still log you in, but I have not experienced that since the spam was removed.

Thank you for fixing this.

Not sure if this has been addressed yet but what was with that fake copy of FFShrine that was posted on another thread?

Thank you for fixing this.

Not sure if this has been addressed yet but what was with that fake copy of FFShrine that was posted on another thread?

Can you post the link?

Firstly, Sincere condolences on the death of a family member 🙁

I think this maybe the link I saw yesterday…I added it to uBlock filters.

http://www.slayingwave.com/

I’m curious, how did you even find that in the first place?

I saw it posted yesterday in another thread if it’s my message you’re referring to ?
it’s still up and running in real-time.

Thread 223907

I saw it posted yesterday in another thread if it’s my message you’re referring to ?
it’s still up and running in real-time.

Thread 223907

Oops, I thought you were the one who originally posted that website to begin with, not that "Lockdown" user lol.